Bitcoin Forum
July 05, 2024, 07:01:19 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Cloudflare and online wallets  (Read 556 times)
oxyon (OP)
Newbie
*
Offline Offline

Activity: 28
Merit: 0


View Profile
August 31, 2013, 06:04:04 AM
 #1

I was reading the "best online wallet" thread and Theoryofbitcoin bought up a good point: cloudflare. Most online wallets I checked uses cloudflare. Can we compile a list on wallets to avoid because they can be MITMed by cloudflare? (they have their SSL keys)

I checked:

this forum - safe, no cloudflare
mtgox - safe, no cloudflare
inputs.io - safe, no cloudflare
blockchain.info - unsafe, cloudflare, (use chrome extension?)
coinbase.com - unsafe, cloudflare
b!z
Legendary
*
Offline Offline

Activity: 1582
Merit: 1010



View Profile
August 31, 2013, 01:40:38 PM
 #2

blockchain.info can't be mitm'd, the hashes are calculated in your browser i think? i haven't read too much on the subject.
marcovaldo
Sr. Member
****
Offline Offline

Activity: 350
Merit: 250



View Profile
August 31, 2013, 01:42:59 PM
 #3

I don't understand, you say that most of the online wallet are unsafe because they use cloudfare, and then, you show that more online wallets are safe and don't use cloudfare  Huh


And would you mind to explain why cloudfare is a problem? And makes the website unsafe.
Blockchain.info is the most used online wallet so far I think.

BITEX
            ███     ███     ███
              ███     ███     ███
                ███     ███     ███
                  ███     ███     ███
                    ███     ███     ███
                      ███     ███     ███
                        ███     ███     ███
                          ███     ███     ███
                            ███     ███     ███
                              ███     ███     ███
                            ███     ███     ███
                          ███     ███     ███
                        ███     ███     ███
                      ███     ███     ███
                    ███     ███     ███
                  ███     ███     ███
                ███     ███     ███
              ███     ███     ███
            ███     ███     ███

The First Locally-Embedded, Yet Global, Crypto-Bank
TELEGRAM    FACEBOOK   TWITTER    YOUTUBE    LINE

                  ███     ███     ███
                ███     ███     ███
              ███     ███     ███
            ███     ███     ███
          ███     ███     ███
        ███     ███     ███
      ███     ███     ███
    ███     ███     ███
  ███     ███     ███
███     ███     ███
  ███     ███     ███
    ███     ███     ███
      ███     ███     ███
        ███     ███     ███
          ███     ███     ███
            ███     ███     ███
              ███     ███     ███
               ███     ███     ███
                 ███     ███     ███

WHITEPAPER | ANN
JOIN WHITELIST NOW!
b!z
Legendary
*
Offline Offline

Activity: 1582
Merit: 1010



View Profile
August 31, 2013, 01:49:56 PM
 #4

I don't understand, you say that most of the online wallet are unsafe because they use cloudfare, and then, you show that more online wallets are safe and don't use cloudfare  Huh


And would you mind to explain why cloudfare is a problem? And makes the website unsafe.
Blockchain.info is the most used online wallet so far I think.

cloudflare is between the user and website so they have the ssl keys apparently
bitcoindigi
Full Member
***
Offline Offline

Activity: 238
Merit: 100



View Profile
August 31, 2013, 01:50:23 PM
 #5

that's why I keep my "savings account" offline.
marcovaldo
Sr. Member
****
Offline Offline

Activity: 350
Merit: 250



View Profile
August 31, 2013, 01:53:16 PM
 #6

cloudflare is between the user and website so they have the ssl keys apparently

Ok, thank you for the information.
I don't know much about security, internet and stuff.

BITEX
            ███     ███     ███
              ███     ███     ███
                ███     ███     ███
                  ███     ███     ███
                    ███     ███     ███
                      ███     ███     ███
                        ███     ███     ███
                          ███     ███     ███
                            ███     ███     ███
                              ███     ███     ███
                            ███     ███     ███
                          ███     ███     ███
                        ███     ███     ███
                      ███     ███     ███
                    ███     ███     ███
                  ███     ███     ███
                ███     ███     ███
              ███     ███     ███
            ███     ███     ███

The First Locally-Embedded, Yet Global, Crypto-Bank
TELEGRAM    FACEBOOK   TWITTER    YOUTUBE    LINE

                  ███     ███     ███
                ███     ███     ███
              ███     ███     ███
            ███     ███     ███
          ███     ███     ███
        ███     ███     ███
      ███     ███     ███
    ███     ███     ███
  ███     ███     ███
███     ███     ███
  ███     ███     ███
    ███     ███     ███
      ███     ███     ███
        ███     ███     ███
          ███     ███     ███
            ███     ███     ███
              ███     ███     ███
               ███     ███     ███
                 ███     ███     ███

WHITEPAPER | ANN
JOIN WHITELIST NOW!
b!z
Legendary
*
Offline Offline

Activity: 1582
Merit: 1010



View Profile
August 31, 2013, 02:20:51 PM
 #7

cloudflare is between the user and website so they have the ssl keys apparently

Ok, thank you for the information.
I don't know much about security, internet and stuff.

Yes it is always good to learn as much as you can and keep an open mind.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!